This vulnerability exists in Fosowl agenticSeek 0.1.0 within the PyInterpreter.execute function located in sources/tools/PyInterpreter.py of the query Endpoint component. The flaw allows remote attackers to perform code injection, potentially executing arbitrary code on the affected system. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity with network attack vector, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability. The vendor was contacted but has not provided any response or patch. No official remediation or temporary fix is currently documented.

Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to inject and execute arbitrary code on the affected Fosowl agenticSeek 0.1.0 system. This could lead to unauthorized control or manipulation of the system running the vulnerable component. However, the impact on confidentiality, integrity, and availability is rated low, and no known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or vendor response is available, users should consider restricting network exposure of the affected component and monitor for any updates from the vendor. Avoid deploying version 0.1.0 in untrusted environments until a patch or mitigation is provided.